Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
File: TkB_fq2BapVV9HrxCQPvRcgXC4I.mft (raw, json)
Hash identifier: 1gYg5T4YO0b51HZCJGviGuF1d1wH7JG4og1W+fWlTT4=
Subject key identifier: 19:16:05:E4:14:91:A4:FA:DE:EC:B0:F8:A5:9D:C1:38:37:F4:27:79
Authority key identifier: 4E:40:7F:7E:AD:81:6A:95:55:F4:7A:F1:09:03:EF:45:C8:17:0B:82
Certificate issuer: /CN=4e407f7ead816a9555f47af10903ef45c8170b82
Certificate serial: 01978B1128DF79EAA6422AD9AFC10BBA8426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
Manifest number: 0683
Signing time: Fri 20 Jun 2025 02:00:46 +0000
Manifest this update: Fri 20 Jun 2025 02:00:46 +0000
Manifest next update: Sat 21 Jun 2025 02:00:46 +0000
Files and hashes: 1: TkB_fq2BapVV9HrxCQPvRcgXC4I.crl (hash: t9gnFamkd2LnLiEABSdyFWvDiscsAPuWnUGfVFIY908=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:11:28:df:79:ea:a6:42:2a:d9:af:c1:0b:ba:84:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e407f7ead816a9555f47af10903ef45c8170b82
Validity
Not Before: Jun 20 02:00:46 2025 GMT
Not After : Jun 21 02:00:46 2025 GMT
Subject: CN=191605e41491a4fadeecb0f8a59dc13837f42779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:28:ed:98:db:22:6c:46:43:7a:96:f9:86:
35:83:c1:2d:00:c3:dd:37:65:1c:ce:f6:07:1f:1c:
dc:d2:39:f3:fb:cd:28:a4:9c:68:24:52:e5:f0:98:
6f:4b:ae:94:70:75:a5:93:f5:8d:76:85:56:a2:2c:
0a:6e:dd:e1:5c:bd:80:46:cb:29:e2:8b:7d:28:c9:
1b:9a:33:e0:3f:06:92:f6:e0:1f:0d:af:eb:e6:f9:
a3:b1:9f:c2:9a:8c:8f:cb:37:ea:97:e0:c6:c7:3e:
81:ae:c3:aa:a7:bb:8e:c9:8b:3e:c9:ba:f6:c3:32:
02:d6:ce:82:b7:fc:44:f3:3c:fa:3c:ee:8e:61:d6:
1a:91:2b:d4:47:a5:4a:2e:64:88:d7:ce:f3:ca:0a:
c8:a4:1b:6f:a5:48:7b:38:2b:3e:3c:7c:30:89:57:
aa:84:1e:e6:b5:cb:5d:41:02:b9:0f:58:a0:b2:9f:
b0:85:5e:69:15:1f:fc:82:c0:0d:a4:56:d4:f1:62:
26:1a:ec:47:e7:f3:a2:c6:a2:5b:24:e4:2c:d0:cd:
c9:b9:cc:dc:c2:8b:14:49:63:8d:28:f2:47:3c:eb:
ea:b3:33:d7:7e:d8:52:b1:23:f4:08:bb:f2:cc:fb:
c5:44:b0:d6:56:0f:17:d7:a4:33:93:5e:48:c0:86:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:16:05:E4:14:91:A4:FA:DE:EC:B0:F8:A5:9D:C1:38:37:F4:27:79
X509v3 Authority Key Identifier:
keyid:4E:40:7F:7E:AD:81:6A:95:55:F4:7A:F1:09:03:EF:45:C8:17:0B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1c:15:55:04:04:be:20:aa:eb:59:80:8e:a4:c1:16:82:41:
84:8b:81:30:6e:55:5a:e9:49:10:e2:c4:50:44:92:81:79:05:
03:5f:46:5b:2a:ce:8f:06:f4:65:8d:52:3d:ba:ad:af:45:d3:
61:cd:8d:bc:25:d0:d3:8a:f5:69:02:88:8e:21:8d:20:8d:fa:
b0:4a:6a:9a:7c:b1:83:f8:13:f6:8a:4c:27:4d:f4:a6:38:a3:
1b:d4:6b:01:e6:2a:1f:9f:1a:b7:f0:7f:1f:45:06:72:54:96:
c3:ab:b8:48:c9:2d:0a:90:0e:0d:8a:ee:9c:fa:21:52:45:a5:
d0:2b:5a:0f:af:c3:e2:a2:64:fa:5c:f5:69:f7:06:dc:81:66:
73:e5:12:32:b1:e1:5c:bb:71:27:a6:26:da:0f:a2:cf:e7:4c:
96:f4:b2:3d:8c:5c:06:a8:38:19:b9:2b:36:6f:83:56:4d:8b:
57:8d:cb:e9:52:63:8b:52:f9:40:97:e0:10:36:f1:6d:af:54:
8e:88:1d:8f:69:ce:c2:0d:cc:6e:f9:5f:23:35:93:fa:c1:36:
65:51:36:86:53:6f:8a:78:f6:d4:18:25:36:05:ec:c8:c7:bd:
c2:07:57:10:cb:ca:9a:35:a3:48:ce:d5:85:24:bf:a0:d9:7a:
34:48:87:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeLESjfeeqmQirZr8ELuoQmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNDA3ZjdlYWQ4MTZhOTU1NWY0N2FmMTA5MDNlZjQ1Yzgx
NzBiODIwHhcNMjUwNjIwMDIwMDQ2WhcNMjUwNjIxMDIwMDQ2WjAzMTEwLwYDVQQD
EygxOTE2MDVlNDE0OTFhNGZhZGVlY2IwZjhhNTlkYzEzODM3ZjQyNzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6Ao7ZjbImxGQ3qW+YY1g8EtAMPd
N2UczvYHHxzc0jnz+80opJxoJFLl8JhvS66UcHWlk/WNdoVWoiwKbt3hXL2ARssp
4ot9KMkbmjPgPwaS9uAfDa/r5vmjsZ/CmoyPyzfql+DGxz6BrsOqp7uOyYs+ybr2
wzIC1s6Ct/xE8zz6PO6OYdYakSvUR6VKLmSI187zygrIpBtvpUh7OCs+PHwwiVeq
hB7mtctdQQK5D1igsp+whV5pFR/8gsANpFbU8WImGuxH5/OixqJbJOQs0M3Juczc
wosUSWONKPJHPOvqszPXfthSsSP0CLvyzPvFRLDWVg8X16Qzk15IwIYdDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkWBeQUkaT63uyw+KWdwTg39Cd5MB8GA1UdIwQY
MBaAFE5Af36tgWqVVfR68QkD70XIFwuCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGtCX2ZxMkJhcFZWOUhyeENRUHZSY2dYQzRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zNTY1NTItMzEyYS00NGNlLTg2Nzct
NDA1NTA1ZmM0NjBlLzEvVGtCX2ZxMkJhcFZWOUhyeENRUHZSY2dYQzRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zNTY1NTItMzEyYS00NGNlLTg2NzctNDA1NTA1ZmM0NjBl
LzEvVGtCX2ZxMkJhcFZWOUhyeENRUHZSY2dYQzRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhwVVQQE
viCq61mAjqTBFoJBhIuBMG5VWulJEOLEUESSgXkFA19GWyrOjwb0ZY1SPbqtr0XT
Yc2NvCXQ04r1aQKIjiGNII36sEpqmnyxg/gT9opMJ030pjijG9RrAeYqH58at/B/
H0UGclSWw6u4SMktCpAODYrunPohUkWl0CtaD6/D4qJk+lz1afcG3IFmc+USMrHh
XLtxJ6Ym2g+iz+dMlvSyPYxcBqg4GbkrNm+DVk2LV43L6VJji1L5QJfgEDbxba9U
jogdj2nOwg3MbvlfIzWT+sE2ZVE2hlNvinj21BglNgXsyMe9wgdXEMvKmjWjSM7V
hSS/oNl6NEiHlw==
-----END CERTIFICATE-----
Generated at Fri Jun 20 08:57:27 2025 by rpki-client